Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier: PtiyGKAFpOH43EFwCta8QlN4IdRChZWBo/EcgygzG9k=
Subject key identifier: 9F:DC:E2:0C:C3:5A:49:0D:BA:7C:EC:CE:D1:2E:18:09:F1:EF:03:CA
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 019FA90767DCB548AB6E494C48ABC43265C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number: 06DD
Signing time: Tue 28 Jul 2026 14:01:02 +0000
Manifest this update: Tue 28 Jul 2026 14:01:02 +0000
Manifest next update: Wed 29 Jul 2026 14:01:02 +0000
Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: 7gQJBHQQUZYHLZIcyvtNgONpQDzDMBAfIKLRtycq3nM=)
2: B1xsgML2xDaRQYkGxUtabnWxmGY.roa (hash: +xPFhEuCza9EAaqJyGgj1UH0V5vl/QcBkrNeZ95rHj4=)
3: WOH-dDFILdAlNDw8JowUyaFPvJw.roa (hash: OCSDelJnuET1EEoYclmA8O4BqfKPKxqqfnyLODL87wk=)
4: X4JSAl7mEoJyzznkY14VbNv09k8.roa (hash: j50w3dwHk0KiPncH2Bx9DQIkaE9cvvACV1hP4QRJhbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:67:dc:b5:48:ab:6e:49:4c:48:ab:c4:32:65:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Jul 28 14:01:02 2026 GMT
Not After : Jul 29 14:01:02 2026 GMT
Subject: CN=9fdce20cc35a490dba7cecced12e1809f1ef03ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:35:67:7b:f1:83:6e:73:01:d8:11:ef:5a:
bf:c0:91:e8:0e:d0:03:1c:d2:0a:35:bb:70:08:ea:
bd:a8:79:9d:f7:6a:13:64:2f:bf:b6:57:3f:01:58:
40:02:ab:0d:a2:2b:9f:33:5f:e8:d4:92:5e:da:75:
7e:f5:aa:e0:48:9f:55:73:05:cd:23:b6:f4:cd:c2:
00:f1:b8:7c:34:83:69:85:dd:62:f7:89:8d:af:02:
4f:d9:88:a7:99:e0:47:eb:0b:8a:37:5c:89:fb:d1:
98:50:bd:d6:74:b3:b9:de:f4:99:53:60:1b:c6:89:
c5:64:bf:9f:1c:c7:d0:23:03:75:74:b3:40:4b:c6:
6d:73:8d:0f:0f:99:78:76:fb:ef:09:1c:60:38:51:
63:61:f8:b7:b6:f8:04:6d:cb:92:db:39:b9:e2:87:
76:80:62:3c:29:a9:f3:4d:25:96:47:9b:aa:d1:c1:
32:68:f2:84:21:7b:76:d3:20:77:98:cc:17:93:0b:
7a:13:07:fa:d0:2c:27:0c:13:5b:8a:73:3a:37:c0:
b2:17:31:ff:ab:de:19:04:a2:d9:37:a3:3a:41:67:
7a:55:eb:88:65:f5:14:e1:e6:c1:77:e2:74:60:3e:
04:3b:b1:3e:ba:84:52:f7:42:61:a4:40:f4:1d:e0:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DC:E2:0C:C3:5A:49:0D:BA:7C:EC:CE:D1:2E:18:09:F1:EF:03:CA
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:af:d7:5c:20:85:5f:71:8d:33:fb:a8:18:16:5e:ea:35:3b:
a5:be:4f:69:06:33:f9:b1:89:2f:4b:59:15:3c:37:96:74:4d:
57:b0:99:d1:43:0b:68:36:71:eb:a9:00:69:ab:43:38:e4:f9:
6d:31:c9:e0:3c:15:fb:32:c2:2f:05:de:0b:d7:f2:06:e7:a4:
0b:27:14:04:a0:7c:06:6f:c0:d0:eb:db:5b:f4:10:b9:4d:20:
0c:18:79:19:f5:0e:35:c6:df:f6:75:6e:28:1f:b2:f6:84:b0:
8c:5b:f6:3d:57:43:11:ef:e5:bb:1d:32:70:7e:c9:3e:e3:1d:
c3:9e:37:ec:6a:ef:46:ea:d2:b3:f7:05:94:4f:9a:c1:23:cb:
22:b3:70:0d:e1:de:94:f3:a2:84:80:e5:44:8e:7f:43:fe:88:
8e:19:0c:23:fe:ba:ad:f1:47:24:a0:f9:88:1c:b3:1c:4b:1a:
d4:c5:d3:d7:52:3f:49:44:35:fe:65:99:a6:dc:ee:49:e8:41:
0e:b3:11:ed:e1:1c:af:18:ad:6f:d1:68:a4:20:cb:de:31:7e:
09:9e:fa:db:ed:cc:e6:60:1b:3b:44:06:fe:d5:d9:3c:d9:41:
43:99:dc:58:d7:f9:43:ef:5c:c2:b2:97:68:6b:88:d1:5f:35:
72:db:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:42 2026 by rpki-client